Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: PnFV6an95hkeBli7TpwJoBioVftsVw8PlSj3CjLfe+I=
Subject key identifier: 27:F8:13:0C:05:85:89:F2:B8:E0:94:7D:A2:71:9C:A1:10:C9:6E:FF
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 0198D705D3115322AD9B984773A179749D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 12FB
Signing time: Sat 23 Aug 2025 13:02:19 +0000
Manifest this update: Sat 23 Aug 2025 13:02:19 +0000
Manifest next update: Sun 24 Aug 2025 13:02:19 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: BUhCzFf7/GuTlKxcOhrbX5AiSSr7OXTw6N2FxtBP64Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d3:11:53:22:ad:9b:98:47:73:a1:79:74:9d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Aug 23 13:02:19 2025 GMT
Not After : Aug 24 13:02:19 2025 GMT
Subject: CN=27f8130c058589f2b8e0947da2719ca110c96eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:4f:02:ff:17:02:77:04:71:08:23:26:9f:
d8:df:06:c9:75:6a:a2:29:da:3a:04:97:14:1c:50:
a2:1c:be:a7:e6:05:72:8d:6f:7c:a2:70:c4:ed:e1:
7c:c9:9d:58:72:06:5e:0d:23:a7:1b:f2:7e:b8:1a:
ab:75:d3:d6:50:66:a4:de:74:99:ba:54:a3:ed:be:
43:f0:57:07:36:da:1d:29:15:f7:d4:2d:89:b0:eb:
b3:cc:b3:e6:7f:06:87:91:cd:62:36:32:d0:da:63:
cc:de:64:9e:80:3c:d5:2c:f6:26:8e:79:7a:2a:50:
bb:3d:36:cd:a6:43:27:35:aa:b3:4e:d6:0d:40:43:
1b:32:84:9f:d5:a6:8f:71:96:a3:3e:f1:54:79:f1:
16:70:db:4c:02:08:b2:80:32:f1:96:22:b7:eb:15:
36:d7:d5:5a:64:76:83:bf:98:36:fe:e2:70:0c:d8:
ce:af:fd:e7:70:ad:99:fc:8d:e9:19:5d:8f:08:35:
8f:28:f3:73:82:36:8a:10:43:2c:dc:14:7e:24:15:
9f:ec:60:0d:42:7f:4f:1b:59:77:c2:c2:94:1b:66:
08:2f:0d:f8:16:0c:1d:d1:19:f2:b8:b2:ec:28:a3:
40:a5:50:de:bf:7f:8e:ae:af:83:8a:5e:66:6b:21:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F8:13:0C:05:85:89:F2:B8:E0:94:7D:A2:71:9C:A1:10:C9:6E:FF
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:11:44:4a:56:29:4f:56:69:65:69:56:9d:46:fd:aa:78:58:
bf:66:9a:4c:0d:ac:38:42:05:b4:d4:98:d4:c6:6a:a3:35:9b:
08:1a:25:cd:d4:6f:90:36:e3:f7:33:c9:93:9c:5e:48:76:ed:
00:07:ba:03:c7:95:96:6e:17:2b:9b:fb:3b:c8:3f:55:a7:47:
55:31:d4:1d:c4:71:61:cb:51:34:6f:28:35:0c:9d:06:de:0b:
42:00:0e:11:41:50:ab:32:3e:aa:c7:e6:57:39:9d:75:5b:c0:
b2:3d:89:1c:61:6c:55:df:e6:7b:fc:82:46:d6:d3:9c:06:2b:
6f:ad:f3:ec:15:a3:ce:5a:ea:c3:21:f1:bd:94:39:a5:54:ff:
b1:98:c5:ba:15:02:c7:fb:de:8f:04:b0:ba:4e:31:37:ab:ed:
d2:be:52:02:58:b8:d8:3b:c9:3f:e1:13:b4:5f:5f:b8:89:20:
ac:a8:7e:85:e2:fe:fb:37:9a:59:6e:03:a0:d5:29:4b:be:a1:
ca:c4:df:10:37:26:00:7c:63:ad:12:38:ac:95:76:1a:f5:ce:
40:27:31:92:72:b1:f6:70:11:65:1f:ec:45:dc:ad:27:ff:ab:
49:50:6a:49:dd:e2:be:c7:ac:f9:7f:80:ff:6e:ef:7b:02:c8:
09:c1:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:43 2025 by rpki-client